Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual page 2926

Complete Software Guide for Junos
Requirements
Overview and Topology
Configuration
CLI Quick
Configuration
2822
®
OS for EX Series Ethernet Switches, Release 10.4
This example describes how to set up captive portal on an EX Series switch:
Requirements on page 2822
Overview and Topology on page 2822
Configuration on page 2822
Verification on page 2824
Troubleshooting on page 2825
This example uses the following hardware and software components:
Junos OS Release 10.1 or later for EX Series switches
An EX3200 or EX4200 Series switch
Before you begin, be sure you have:
Performed basic bridging and VLAN configuration on the switch. See "Example: Setting
Up Basic Bridging and a VLAN for an EX Series Switch" on page 1525.
Generated an SSL certificate and installed it on the switch. See "Generating SSL
Certificates to Be Used for Secure Web Access" on page 490.
Configured basic access between the EX Series switch and the RADIUS server. See
"Example: Connecting a RADIUS Server for 802.1X to an EX Series Switch" on page 2765.
Designed your captive portal login page. See "Designing a Captive Portal Authentication
Login Page on an EX Series Switch" on page 2850.
This example shows the configuration required on the switch to enable captive portal
on an interface. To permit a printer connected to the captive portal interface to access
the LAN, add its MAC address to the authentication whitelist. The MAC addresses on this
list are permitted access on the interface without captive portal authentication.
The topology for this example consists of one EX Series switch connected to a RADIUS
authentication server. One interface on the switch is configured for captive portal. In this
example, the interface is configured in single supplicant mode.
To configure captive portal on your switch:
To quickly configure captive portal on the switch after completing the tasks in the
Requirements section, copy the following commands and paste them into the switch
terminal window:
[edit]
set system services web-management https local-certificate my-signed-cert
set services captive-portal secure-authentication https
set services captive-portal interface ge-0/0/10.0
set ethernet-switching-options authentication-whitelist 00:10:12:e0:28:22
set custom-options post-authentication-url http://www.my-home-page.com
Copyright © 2010, Juniper Networks, Inc.